NNewforma

Products

Exploited and recent CVEs

• CVE-2025-35061 Medium 5.9 Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmx 0.4%
• CVE-2025-35062 Medium 5.3 Newforma Info Exchange (NIX) default anonymous access 0.4%
• CVE-2025-35060 Medium 5.5 Newforma Info Exchange (NIX) stored XSS via SVG file upload 0.2%
• CVE-2025-35059 Medium 4.3 Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspx 0.2%
• CVE-2025-35058 Medium 5.9 Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashx 0.4%
• CVE-2025-35057 Medium 5.3 Newforma Info Exchange (NIX) forced NTLMv2 authentication via /RemoteWeb/IntegrationServices.ashx 0.3%
• CVE-2025-35056 Medium 5.0 Newforma Info Exchange (NIX) limited file read 0.4%
• CVE-2025-35055 High 8.8 Newforma Info Exchange (NIX) insecure file upload 0.6%
• CVE-2025-35054 Medium 5.3 Newforma Info Exchange (NIX) insufficiently protected credentials <0.1%
• CVE-2025-35053 Medium 6.4 Newforma Info Exchange (NIX) arbitrary file read and delete 0.4%
• CVE-2025-35052 Medium 5.3 Newforma Info Exchange (NIX) shared hard-coded secret key 0.4%
• CVE-2025-35051 Critical 9.8 Newforma Project Center Server (NPCS) .NET unauthenticated deserialization 0.8%
• CVE-2025-35050 Critical 9.8 Newforma Info Exchange (NIX) .NET unauthenticated deserialization 0.9%
• CVE-2024-32499 Medium 4.9 Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed. 0.5%